What are some best practices for verifying the security of internally developed code?

like
Posting as :
works at
You are currently posting as works at

Following. Is this a desktop app or web app? For web, Have you reviewed the OWASP policies ? From there , you can look up tools like snyk , sonar cloud etc as potential security dashboard tools to monitor your site for application vulnerabilities in real time

helpful

We run sonar against our dev and test environments.

Sonar for code quality
Snyk for libraries
Fortify for static scan of the code
Penetration testing tools (cant recall the names) for testing systems as blackbox

helpful

Related Posts

Anyone here from Accenture Operations?
What is the avg hike % in Base Pay?
What is the avg Variable Pay out %?
Level 9 & 8.

like
like

How much does title matter down the road? I’m a Manager now but was offered a Senior Analyst role with much higher pay. Any repercussions of this? Afraid of working backwards...

likehelpful

Just received a verbal offer from Deloitte Healthcare Ops and Transformation. The salary would be a big bump, technically taking a demotion from SC -> C

I know they laid off people a while back and are now hiring again. Should I be worried about job security at all?

What’s D’s work/life balance like? Appreciate any insight

like

Hi Guys

This is my first month in Nagarro, usually when will we get salary, is it last working day?do we need to wait eod?

What would happen if I don't join a company after accepting offer letter?

like

What’s the best or helpful advice for those seeking to transition into the nonprofit world?

like

Hi folks,

I have been offered a position on Senior Consultant/ Deputy Manager at Deloitte India for 4.5 years of exp.

Is this position/role normal for years of experience I hold?

like

How saturated is the Medicaid planning / elder law area in Florida? Looking to branch into this area as I find it really interesting.

like

Is the working hours mentioned in my workspace correct? I have recently been allocated to a project and it shows timings from 11 pm -9 am..

like

Hello fellow 🐠! I’m new to this platform and would greatly appreciate some “likes” for this post so that I will be able to send DMs for job networking opportunities.

like

Going from PR agency to a marketing role in-house, tips and advice pretty please!!!

like

Wow hate the overuse of “from a ______ perspective"

likeuplifting

𝐒𝐮𝐜𝐜𝐞𝐬𝐬𝐅𝐚𝐜𝐭𝐨𝐫𝐬 𝐋𝐌𝐒 𝐀𝐝𝐦𝐢𝐧𝐢𝐬𝐭𝐫𝐚𝐭𝐢𝐨𝐧 𝐇𝐞𝐥𝐩!

Scan to Download!! Save & Share the Card ..

#SAP #SuccessFactors #HXM #LMS #QRCards

Post Photo

Hexaware Technologies sent a mail of resuming WFO, no details mentioned about if company is going to follow hybrid model or 5 day working is mandatory for all. Can anyone please give clarity

like

How much can I expect from hexaware for 4 years and 8 months of experience in azure DevOps?

Current CTC 18.4

like

If we take the GMAT online, does it actually take a full 7 days to get the results? Or do you have unofficial results immediately after?

like

Deferred admit here as well! (HBS and Wharton). If you are thinking about applying I highly recommend it. It won’t hurt your chances in the future and you have so much more time to study in college!!

AMA

like

Hi, Can anyone tell me if I make an internal switch in TCS as a Salesforce developer, will there be any hike?

like

When someone in the creative department turns 40.

Post Photo
likefunny

Additional Posts in Software Engineering

Looking for a recommended software to scrape data from ZoomInfo.

Thoughts?

like

How do you all deal with the guilt of leaving a comany/ team? I have been working at Microsoft for 1 year now, and seriously considering moving. I find the code base to be very legacy and I mostly work on obscure bugs that I spend so much time on, mostly due to navigating this large code base and not having much docs to refer to. Hence I find the job slightly unsatisfying, and that I could learn more elsewhere. However, I love the wlb, the team and company culture. The guilt stops my applying.

like

Our team is searching for a seasoned oracle developer specializing in retail/ecommerce, along with cloud exp. Fully remote. If your interested DM me.

like
like

Has anyone working tech for a bank been laid off yet? Tech layoffs all over the media but no one is talking about developers at banks (who make up 1/3 of headcount in some cases)

like

Is 120k+super a good salary for software tester (manual) with 7 years of experience in Melbourne?

like

I can't find a really interesting bowl here.

Does anyone know or be interested in an open-source bowl, for example?

Please suggest me good bowls 🙏

like

First post, not sure if this is the best bowl to use but here goes. I’m wondering if anyone can share a bit about their experience working at MongoDB. I have seen they are hiring for many roles and am curious to hear about their experience. In particular, I would like to hear about software engineer roles. Currently I work on database engine C++ code and have seen some roles that indicate continuing down this stream would be possible with my skillset.

like

Is it common to negotiate software engineer salary at smaller companies? I know it’s common at FAANG, but what about for companies with around 200 engineers? I have a counter offer from my current company and on-site interviews scheduled for end of July with google and Amazon, but I’d prefer to go with the smaller local company if I can negotiate the salary (from offer letter) up another 5% or so.

like

I got an offer from Mindtree as a Support Engineer in the US and was asked to fill out a profile through an excel sheet. Has anyone else experienced this? I don't feel comfortable sending my personal info over email in an excel sheet

like

Okay, I feel like if a QE in India needs to email me, an SE, to just press the 'resolve' button on a user story that was created after a bug report was issued and fixed, then maybe... Just MAYBE... There might be a bureaucracy problem. 😒

likefunny

I am wanting to see where I fall in compensation for salary as a mid level software engineer. My base is 120k with 10k RSU. I also get a yearly bonus estimate about 18,000. This is my first job in tech as well so more than doubled what I made before was just curious. I'm in NM

like

Started a new job this week. Very excited. My second tech job since doing a bootcamp and leaving my old career (police officer).

like
like

What drives people to answer stackoverflow questions? I love them for doing so, but when will I feel the urge to contribute?

like

Has anyone else worked two programming roles at one time?
I currently work as a Contracted Software Engineer and I’m set to finish my contracted time at the end of October. To stay ahead of game I started to move forward in the interview process with another opportunity as an Application Software Programmer and just received notification that I got the position. I definitely could use the extra paycheck to help out with my financial obligations. Just wanted to see if anyone has done this before.

like

Hello!
Does someone know how it is to work nowadays at LiveTiles? I have seen a lot of negative comments about management and the CEO, but I wonder how does it affect the engineering teams.

like

Just getting little depressed after being rejected from interview. Anyone else has the same feeling.Could have done better.

like

I am currently a civil engineer thinking of switching to software engineering. I got my masters in water resource engineering where I was coding a decent amount for assignments and it has really stuck with me. Unfortunately, in my current role and field (civil), I don’t really get to do much coding. Does anyone have a similar experience of jumping ship to do software engineering? What would be the best way to go about it (coding bootcamp, another degree, something else)?

like

When do you Code freeze before a release?
We are devlivering a major injcrement in 1 1/2 weeks and have not created a release branch yet but keep merging large feature branches.

like

New to Fishbowl?

Download the Fishbowl app to
unlock all discussions on Fishbowl.
That was just a preview…
Sign Up to see all discussions
  • Discover what it’s like to work at companies from real professionals
  • Get candid advice from people in your field in a safe space
  • Chat and network with other professionals in your field
Sign up in seconds to unlock all discussions on Fishbowl.

Already a user?
Login here

Share

Embed this post

Copy and paste embed code on your site

Preview

Download the
Fishbowl app

See what’s happening in your industry
from the palm of your hand.

A phone with Fishbowl app

Scan your QR code to download
Fishbowl app on your mobile

Download app

Sign up for free to view this conversation on Fishbowl

By continuing you agree to Terms of Use and Privacy Policy

Already have an account? Log in

Sign up for free to continue using Fishbowl

By continuing you agree to Terms of Use(New) and Privacy Policy(New)
Messaging rates may apply

Already have an account? Log in

For account settings, visit Fishbowl on Desktop Browser or

General

Legal